$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa File: e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa (raw, json) Hash identifier: q5PUvpkihXHWQPRF4WEj2d9SK76K5Ygve6SvashvaMY= Subject key identifier: BD:13:BD:E3:7E:E3:0D:B7:71:E5:35:4D:C6:F9:CE:40:0A:7E:42:38 Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Certificate serial: 010D0C9F432858487755E27144F3F2280BB9A630 Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 11290 IP address blocks: 24.231.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:e2:71:44:f3:f2:28:0b:b9:a6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=e6bd71dc-aae6-4082-9750-1a8f438b6145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:05:cd:ac:ea:e6:65:b4:c3:2c:2c:e5:c6:aa: 61:96:bb:6a:6b:c7:31:1c:ba:38:72:c9:40:c0:9a: 5b:83:7a:80:72:33:79:e6:e5:15:12:34:cc:9d:07: 2b:26:2d:e2:7f:ae:2f:11:7d:f8:f2:47:76:48:11: cf:51:64:1f:cf:e6:b3:50:f7:e0:ef:87:7b:3e:77: 91:cc:29:92:79:4e:1f:c7:94:93:bc:de:02:b0:78: 24:10:13:0b:87:96:39:a9:dd:39:aa:25:49:9c:2f: 99:41:da:69:e5:6e:ac:f6:41:b7:20:fa:11:8b:d9: eb:0e:25:2d:d2:e8:22:4e:4a:24:73:e6:21:4e:f1: fd:d0:05:48:b1:91:04:e0:9f:48:cd:42:60:b4:3a: ef:ca:a6:70:25:af:6a:bc:23:0e:bf:3f:a2:45:d1: c9:ac:62:fb:c2:eb:7c:73:3a:c8:6b:4d:5c:aa:f0: 0f:7d:d1:83:61:2b:ba:18:76:97:fe:da:d1:6f:9a: 73:85:cf:e1:59:fc:76:38:2f:7c:72:9a:b4:89:39: 7d:ef:af:b0:81:f7:12:ac:bc:71:f0:70:d2:67:bc: a4:75:e7:77:17:98:91:46:b3:45:1b:19:b6:24:b4: 01:c6:6c:de:11:88:1a:f2:03:7b:9f:dd:fb:f8:b3: cf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:13:BD:E3:7E:E3:0D:B7:71:E5:35:4D:C6:F9:CE:40:0A:7E:42:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/e0865ba1-7217-3bdc-bdfc-88c37c2f3a3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl X509v3 Authority Key Identifier: keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer sbgp-ipAddrBlock: critical IPv4: 24.231.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:68:50:37:4f:9e:f1:03:67:c0:82:ad:84:54:ad:73:60:d2: 4f:ba:8e:9d:54:4b:8a:e0:ca:e9:89:68:bf:6b:2c:42:53:df: e0:30:1f:6f:38:be:24:7a:ce:9f:da:23:e1:3d:9f:8d:f9:64: c3:ec:da:90:c9:a2:f7:fd:0f:d7:aa:05:6c:ba:1a:6b:8c:a7: 82:b0:31:7e:fa:b2:21:73:cc:3e:07:16:ad:3c:2f:30:97:da: 6f:09:88:1d:44:e9:bb:5e:20:18:b2:28:a0:3a:9a:26:22:5f: 1c:3e:dd:27:8d:8e:d7:2d:05:98:02:53:0a:b4:19:2f:41:98: 01:dc:ed:57:f2:21:0d:56:9b:86:a3:c4:d9:dc:a7:d2:fd:8c: b1:74:d5:be:e7:99:88:97:17:5b:92:e2:72:76:fe:be:f9:78: 4e:da:cf:0c:99:3e:99:6d:28:df:42:1f:75:7e:ba:bc:b7:3d: a8:6c:65:1d:6d:af:a7:ca:bd:8f:27:69:72:1f:5c:24:91:62: ce:43:73:98:01:ed:01:c8:2e:2c:a0:82:f6:33:0e:00:7f:d5: 13:c5:91:c7:53:ee:90:4a:36:5b:51:59:80:0b:15:85:3f:86: 56:af:8d:75:19:ca:75:60:80:e8:7f:fc:98:85:aa:e9:d5:46: 28:f7:65:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VeJxRPPyKAu5pjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5 MDVmMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ZTZiZDcxZGMtYWFlNi00MDgyLTk3NTAtMWE4ZjQzOGI2MTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAXNrOrmZbTDLCzlxqphlrtqa8cxHLo4cslA wJpbg3qAcjN55uUVEjTMnQcrJi3if64vEX348kd2SBHPUWQfz+azUPfg74d7PneR zCmSeU4fx5STvN4CsHgkEBMLh5Y5qd05qiVJnC+ZQdpp5W6s9kG3IPoRi9nrDiUt 0ugiTkokc+YhTvH90AVIsZEE4J9IzUJgtDrvyqZwJa9qvCMOvz+iRdHJrGL7wut8 czrIa01cqvAPfdGDYSu6GHaX/trRb5pzhc/hWfx2OC98cpq0iTl976+wgfcSrLxx 8HDSZ7ykded3F5iRRrNFGxm2JLQBxmzeEYga8gN7n937+LPPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0TveN+4w23ceU1Tcb5zkAKfkI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvZTA4NjViYTEtNzIxNy0z YmRjLWJkZmMtODhjMzdjMmYzYTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEGOcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1oUDdPnvEDZ8CCrYRUrXNg0k+6jp1US4rgyumJaL9rLEJT3+AwH284 viR6zp/aI+E9n435ZMPs2pDJovf9D9eqBWy6GmuMp4KwMX76siFzzD4HFq08LzCX 2m8JiB1E6bteIBiyKKA6miYiXxw+3SeNjtctBZgCUwq0GS9BmAHc7VfyIQ1Wm4aj xNncp9L9jLF01b7nmYiXF1uS4nJ2/r75eE7azwyZPpltKN9CH3V+ury3PahsZR1t r6fKvY8naXIfXCSRYs5Dc5gB7QHILiyggvYzDgB/1RPFkcdT7pBKNltRWYALFYU/ hlavjXUZynVggOh//JiFqunVRij3Zbg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:49 2025 by rpki-client